netfilter: nft_limit: allow to invert matching criteria

Browse source

This patch allows you to invert the ratelimit matching criteria, so you
can match packets over the ratelimit. This is required to support what
hashlimit does.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

...

This commit is contained in:

Pablo Neira Ayuso 2015-12-28 18:21:44 +01:00

parent 5913beaf0d

commit c7862a5f0d

2 changed files with 19 additions and 3 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

6

include/uapi/linux/netfilter/nf_tables.h

View file

16

net/netfilter/nft_limit.c

View file